OPC Mirror Redundancy

Transcription

1 DeltaV Distributed Control System Product Data Sheet December 2017 Redundancy OPC Data Access Clients and s Application Station Pair with Redundant OPC DA s and redundant Switch / Router / Firewall Pro Plus Op Station Application Station Control Network Ethernet Redundant provides highly reliable OPC -to-server data transfer. Reliable data transfer Hardware and software redundancy Automatic switchover On-line upgradable Introduction is an OPC Data Access-compliant software application that enables two or more OPC Data Access servers to communicate with each other. enables easy, secure and reliable data transfer among different control systems using OPC communications. For increased reliability and availability, can be made redundant, using an active and a standby instance of. Used in conjunction with the redundant DeltaV OPC Data Access servers, you are protected against single point OPC hardware and software failures. The redundant resides on a dedicated pair of Application Stations. When the active fails, the standby automatically takes over, providing reliable data transfer without user intervention.

2 Redundancy December 2017 Benefits Reliable data transfer. redundancy consists of an active and standby. If the active or its associated Application Station detects a failure, the standby assumes the active role, providing reliable data transfer. Your OPC communications are protected against unexpected failures. Hardware and software redundancy. The redundant resides on a pair of Application Stations. One Application Station is dedicated to the active and the other Application Station is dedicated to the standby, providing hardware and software redundancy. Automatic switchover. If the active or its associated Application Station detects a failure, the standby assumes the active role automatically, with no user intervention required. The standby is in hot standby mode, so switchover occurs quickly. Depending on the failure condition and OPC redundancy configuration, the failed and Application Station will reboot and automatically assume the standby role, restoring redundancy with no user intervention. On-line upgradable. Since the redundant resides on a pair of Application Stations, can be upgraded online. Just like the DeltaV controllers, you can upgrade the standby and its associated Application Station while the active maintains OPC communications, then manually switch over to the upgraded Application Station. Product Description provides real-time, read/write data transfer between two or more OPC s. For critical OPC data communications where you can t afford interruptions, the offers OPC -to- communication redundancy. You can add a standby that operates in hot standby mode, replicating the operation of the active. Since OPC Mirror works with the redundant s, you can add an active and standby to the Application Station pair hosting the redundant s to provide complete communication redundancy. The active connects to the active and the standby connects to the standby, for a one-to-one, OPC-Mirror-to-DeltaV-OPC- relationship. When a monitored fault is detected, the active fails over to the standby, which then assumes the active role. Your OPC communications continue on the new active without losing OPC communications. In addition, the DeltaV Event Chronicle stores a record of each switchover and the reason it occurred, if known. The redundant resides on a pair of DeltaV Application Stations. One copy of must be installed on each Application Station in the Application Station pair. redundancy is configured in DeltaV Explorer from the Application Station Properties dialog. redundancy must be configured with redundancy. Then, during DeltaV workstation configuration, you identify the Application Station that will host the initial active and the Application Station that will host the initial standby. Although there are two physical Application Stations that host the redundant, they are seen by the DeltaV system as a single workstation. The Application Station pair is known by the name configured for the initial active node (e.g. REDOPC). The initial standby node has the same name appended with _S (e.g. REDOPC_S). The Application Station pair appears in the DeltaV Explorer system tree as a single icon. By configuring redundancy, a redundancy subsystem is created on the Application Station pair. The redundancy subsystem transfers messages and data between the Application Stations, keeping the active and standby synchronized. You only need to configure the OPC item mappings on the active the redundancy subsystem ensures that the configuration is copied to the standby. redundancy also includes redundant on the Application Station pair. Any control modules assigned to the Application Station pair are redundant. Landing your OPC data in control modules running in the Application Station pair ensures redundant module execution, just like in redundant DeltaV controllers. When you assign control modules to execute in the Application Station pair, the redundancy subsystem ensures that the modules running in the standby subsystem are synchronized with the modules running in the active subsystem. 2

3 Redundancy December 2017 The DeltaV Diagnostics Explorer includes an and redundancy subsystem. The and OPC Mirror redundancy subsystems provide diagnostics information for, the server connections ( pipes ), and the connected OPC s, as shown below. The active and its connected active work together to provide one-for-one redundancy with the standby and its connected standby OPC. If a problem is detected with any of the monitored components on the active node, the entire Application Station will switch over to the standby node, with the standby and the standby assuming the active role. DeltaV Diagnostics Explorer allows you to view redundancy diagnostics data. When you configure redundancy, the Application Station itself is not redundant, only, the DeltaV OPC and subsystem. In addition, the Application Station pair is dedicated to redundant OPC communications. Once the Application Station pair is configured for OPC redundancy, no other subsystems on the Application Station pair may be enabled. When you configure the Application Station pair for the first time, you identify the initial active and the initial standby OPC Mirror nodes. However, during operation, either Application Station can host the active, depending on the last switchover. Since either can be the active OPC Mirror, each Application Station should be sized to handle the active role. The automatic switchover protects you in the event of a failure. If the active fails, the standby OPC Mirror automatically becomes the active. During normal operation, the standby is in hot standby mode, so switchover from the failed active to the standby OPC Mirror occurs immediately after the redundancy subsystem has detected the failure and triggered the switchover. The hot standby mode adds more load to the DeltaV system, but ensures immediate availability of OPC data after switchover. During Application Station switchover, which typically takes a few seconds (depending on the Application Station hardware and the size of the OPC configuration), the OPC data will hold the last value, ensuring bumpless data transfer. A switchover event is generated and collected in the DeltaV Event Chronicle, providing notification to the operator that a switchover has occurred. 3

4 Redundancy December 2017 A failed active and associated Application Station will remained failed by default, waiting for the cause of the failure to be investigated. While the failed is in the failed state, switchovers are disabled and the active is in simplex mode. However, you can configure the Application Station pair to automatically reboot the failed Application Station to allow the failed to assume the standby role without user interaction. A standby that assumes the active role will remain the active until the next switchover. Some of the events that can cause a switchover are: failure Connected OPC failure DeltaV software processes failure Application Station hardware failure Communications failure between the active and standby Communications failure between connected OPC s Manual switchover from Diagnostics From the DeltaV Diagnostics Explorer, you can see the status of the active and standby. Indication of the active and standby status is also available from a redundancy faceplate graphic display located in the system tray on the Application Station pair. Mirror to the standby. During switchover, the failed will hold last value until the standby assumes the active role. The system is upgraded without losing OPC communications. You can then upgrade the standby OPC Mirror node at your convenience. The active and the active reside on the same Application Station. The standby and the standby reside on a second Application Station. A 3rd-party OPC server may be installed on the same Application Station as the active and active DeltaV OPC. In this architecture, the 3rd-party OPC server should also be installed on the Application Station that hosts the standby and the standby OPC. Doing this will prevent data loss when the failed active switches over to the standby, when the failed active OPC Mirror, including the 3rd-party OPC server, is shut down. The marshalling of the connection between the 3rd-party OPC server and the active is handled automatically by the software. The active and standby are monitoring the OPC communications, but only the active is transferring data. With a second 3rd-party OPC on the second Application Station, failure of the active and switchover to the standby does not impact communications to the 3rd-party OPC server, providing bumpless transfer of OPC data. During switchover, holds the last good value. Once the standby becomes active, real-time OPC communications will resume. 3rd Party OPC 3rd Party OPC Application Station Pair (Active/Standby) You can upgrade the Application Station pair online without losing OPC data communications between the OPC s connected through the redundant. Simply upgrade the standby node, and then perform a manual switchover. OPC data transfer will switch from the active OPC A 3rd-party OPC server may also be installed on a 3rd-party workstation. In this architecture, the active and standby will be configured to connect to the remote 3rd-party OPC. 4

5 Redundancy December 2017 The marshalling of the connection between the 3rd-party OPC server and the active is handled automatically by the software. The active and standby are monitoring the OPC communications, but only the active is transferring data. Failure of the active and switchover to the standby does not impact communications to the 3rd-party OPC server, providing bumpless transfer of OPC data. During switchover, will hold the last good value. Once the standby becomes active, real-time OPC communications will resume. In this architecture, the 3rd-party workstation and 3rd-party OPC server are a single point of failure; therefore, failure of the 3rd-party OPC workstation or server will cause a loss in data communications. From the Configuration client, you can enable server monitoring. Once enabled, you configure the desired switchover behavior. The options are to switch over if any OPC server connected to the active fails or to switch over if all OPC servers connected to the active fail. The redundant Monitor feature enables status of 3rd-party OPC servers to influence the operation of the redundancy, increasing your OPC communication reliability and availability. 3rd Party Workstation 3rd Party OPC Application Station Pair (Active/Standby) The redundant is well integrated with the redundant s and the DeltaV redundancy subsystem. The redundant is aware of the status of the DeltaV OPC s and will switch over if a problem is detected in the, communications to the, or in the Application Station itself. The redundant may also be configured to monitor the status of its connected 3rd-party OPC servers and take action based on the status of the 3rd-party OPC servers. The redundant Monitor feature allows you to configure the redundant to monitor the status of the connected 3rd-party OPC servers and switch over if communications are lost between the active and the 3rd-party OPC server. In the example architecture noted above, where a simplex 3rdparty OPC server is located on a 3rd-party workstation, failure of the network connection between the active and the 3rd-party OPC server would typically result in a loss of OPC data communications. With the Monitor, the loss of data communications due to the failed network connection would be detected by the Monitor and the active would switch over to the standby. Redundant is supported only on the DeltaV Application Station. Simplex may be used with redundant s. The simplex may be installed on another DeltaV workstation or a 3rd- party workstation. The simplex does not provide the Monitor feature included in the redundant. A redundant may be licensed for up to 50 OPC server connections. Each DeltaV system will support up to 20 redundant instances (residing on 20 Application Station pairs). For more information on the Application Station, refer to the Application Station product data sheet. 5

6 Redundancy December 2017 Ordering Information Description Redundancy License for Model Number VE2212RED Related Products. Transfers thousands of values back and forth between your DeltaV system and other OPC- compliant systems. Application Station Software Suite. Integrate your DeltaV system with 3rd party systems and applications on a DeltaV workstation. Includes a scalable DeltaV Continuous Historian and Data Access server. Backup and Recovery. Provides data backup and disaster recovery for DeltaV system and associated process control data. OPC UA. The different OPC UA servers and clients in the DeltaV system allows data reads and writes to and from 3rd party application in an easy, reliable and secure way. Prerequisites One Application Station Software Suite license with the appropriate scale up, VE2201Sxxxxx (where xxxxx is the number of OPC data values required, from to 30000). One license, VE2212Sxxx (where xxx is the number of OPC server connections required, from 002 to 050). Redundancy License for OPC Data Access s, VE2224RED One copy of installed on each Application Station in the Application Station pair. Two Dell computers (workstation or server class, as required). It is recommended that the Dell computers used for the Application Station pair be the same model. The Application Station pair used for redundancy must be dedicated to OPC communications; you cannot enable any other subsystem on the Application Station pair and you should not install or run non-opc based applications on the Application Station pair. If you re using with non- servers, then you should follow the instructions provided by the 3rd-OPC server supplier when configuring the 3rd-party OPC server. DeltaV v10.3 or later. Emerson North America, Latin America: or Asia Pacific: Europe, Middle East: , Emerson. All rights reserved. The Emerson logo is a trademark and service mark of Emerson Electric Co. The DeltaV logo is a mark of one of the Emerson family of companies. All other marks are the property of their respective owners. The contents of this publication are presented for informational purposes only, and while every effort has been made to ensure their accuracy, they are not to be construed as warranties or guarantees, express or implied, regarding the products or services described herein or their use or applicability. All sales are governed by our terms and conditions, which are available on request. We reserve the right to modify or improve the designs or specifications of our products at any time without notice.